Aggregator

挪威开始在海底储存液化二氧化碳

Solidot
9 months ago
为应对全球气候变化，挪威开始将液化二氧化碳埋藏在海床下一英里半的一层海绵岩中。挪威政府承担该项目第一阶段 10 亿美元费用中的八成，三大石油公司——壳牌、挪威国家石油和道达尔能源——为项目的持续扩建资助 7.14 亿美元，欧盟补贴 1.5 亿美元。作为欧洲最大的石油和天然气生产国，挪威正利用其石化收入探索“碳倾倒（carbon dumping）”方案能否有效。如果一切顺利，三大石油公司表示它们的设施每年可将 500 万公吨二氧化碳泵入海底，约占挪威年排放量的十分之一。液化二氧化碳由名叫 Northern Pioneer 的运输船运送，每次可装载 7500 公吨。

Sploitlight: Analyzing a Spotlight-based macOS TCC vulnerability

Threat intelligence | Microsoft Security Blog
9 months ago

Microsoft Threat Intelligence has discovered a macOS vulnerability, tracked as CVE-2025-31199, that could allow attackers to steal private data of files normally protected by Transparency, Consent, and Control (TCC), including the ability to extract and leak sensitive information cached by Apple Intelligence.

The post Sploitlight: Analyzing a Spotlight-based macOS TCC vulnerability appeared first on Microsoft Security Blog.

Microsoft Threat Intelligence

Sploitlight: Analyzing a Spotlight-based macOS TCC vulnerability

Threat intelligence | Microsoft Security Blog
9 months ago

Microsoft Threat Intelligence has discovered a macOS vulnerability, tracked as CVE-2025-31199, that could allow attackers to steal private data of files normally protected by Transparency, Consent, and Control (TCC), including the ability to extract and leak sensitive information cached by Apple Intelligence.

The post Sploitlight: Analyzing a Spotlight-based macOS TCC vulnerability appeared first on Microsoft Security Blog.

Microsoft Threat Intelligence

CVE-2025-7811 | StreamWeasels YouTube Integration Plugin up to 1.4.0 on WordPress cross site scripting (EUVD-2025-22968)

VulDB Recent Entries
9 months ago
A vulnerability, which was classified as problematic, was found in StreamWeasels YouTube Integration Plugin up to 1.4.0 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2025-7811. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-7809 | StreamWeasels Twitch Integration Plugin up to 1.9.3 on WordPress cross site scripting (EUVD-2025-22969)

VulDB Recent Entries
9 months ago
A vulnerability, which was classified as problematic, has been found in StreamWeasels Twitch Integration Plugin up to 1.9.3 on WordPress. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-7809. The attack may be initiated remotely. There is no exploit available.
vuldb.com

CVE-2025-54418 | CodeIgniter up to 4.6.1 Image os command injection (GHSA-9952-gv64-x94c)

VulDB Recent Entries
9 months ago
A vulnerability was found in CodeIgniter up to 4.6.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation leads to os command injection. This vulnerability is handled as CVE-2025-54418. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Managed ad